Encrypting your instructions is enough to bypass Grok and exfiltrate its users’ history

An Adversa researcher showed that encrypting malicious instructions with PBKDF2 and AES-256-GCM is enough to bypass Grok’s guardrails, which decrypt the payload and then execute it as their own tool output. xAI was told in June, and the assistant was still leaking users’ names, locations, and chat histories on August 20.